@gmickel/gno 1.28.0 → 1.29.1

package/spec/output-schemas/egress-audit-management.schema.json

@@ -0,0 +1,88 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://gno.sh/schemas/egress-audit-management.schema.json",
+  "title": "Egress audit management output",
+  "oneOf": [
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "receipts", "nextCursor"],
+      "properties": {
+        "schemaVersion": { "const": "1.0" },
+        "receipts": { "type": "array" },
+        "nextCursor": { "type": ["string", "null"] }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "receipt"],
+      "properties": {
+        "schemaVersion": { "const": "1.0" },
+        "receipt": { "type": "object" }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "retention",
+        "receipts",
+        "bytes",
+        "oldestCreatedAtMs",
+        "newestCreatedAtMs"
+      ],
+      "properties": {
+        "schemaVersion": { "const": "1.0" },
+        "retention": { "type": "object" },
+        "receipts": { "type": "integer", "minimum": 0 },
+        "bytes": { "type": "integer", "minimum": 0 },
+        "oldestCreatedAtMs": { "type": ["integer", "null"] },
+        "newestCreatedAtMs": { "type": ["integer", "null"] }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "auditId",
+        "deleted",
+        "physicalCleanup",
+        "checkpointedFrames",
+        "remainingWalFrames"
+      ],
+      "properties": {
+        "schemaVersion": { "const": "1.0" },
+        "auditId": { "type": "string" },
+        "deleted": { "const": 1 },
+        "physicalCleanup": {
+          "enum": ["completed", "wal_busy", "failed"]
+        },
+        "checkpointedFrames": { "type": "integer" },
+        "remainingWalFrames": { "type": "integer" }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "deleted",
+        "physicalCleanup",
+        "checkpointedFrames",
+        "remainingWalFrames"
+      ],
+      "properties": {
+        "schemaVersion": { "const": "1.0" },
+        "deleted": { "type": "integer", "minimum": 0 },
+        "physicalCleanup": {
+          "enum": ["completed", "wal_busy", "failed"]
+        },
+        "checkpointedFrames": { "type": "integer" },
+        "remainingWalFrames": { "type": "integer" }
+      }
+    }
+  ]
+}

package/spec/output-schemas/mcp-http-error.schema.json

@@ -13,18 +13,129 @@
       "additionalProperties": false,
       "required": ["code", "message"],
       "properties": {
-        "code": { "const": -32000 },
+        "code": { "enum": [-32000, -32003] },
         "message": {
           "enum": [
             "Unauthorized",
             "Forbidden",
+            "Operation blocked by collection egress policy",
             "Request body too large",
             "Too many requests",
             "Resident runtime unavailable"
           ]
+        },
+        "data": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["code", "message", "reason", "audit"],
+          "properties": {
+            "code": { "const": "EGRESS_DENIED" },
+            "message": {
+              "const": "Operation blocked by collection egress policy"
+            },
+            "reason": {
+              "enum": [
+                "LOCAL_DESTINATION",
+                "LAN_POLICY_AUTHENTICATED",
+                "REMOTE_POLICY_AUTHENTICATED",
+                "INVALID_INPUT",
+                "NO_COLLECTION_POLICY",
+                "COLLECTION_LIMIT_EXCEEDED",
+                "INVALID_COLLECTION",
+                "UNKNOWN_ACTION",
+                "UNKNOWN_DESTINATION",
+                "ACTION_DESTINATION_MISMATCH",
+                "UNKNOWN_CONTENT_CLASS",
+                "UNKNOWN_POLICY",
+                "UNKNOWN_POLICY_SOURCE",
+                "INVALID_POLICY_SOURCE_PAIR",
+                "INVALID_CALLER",
+                "CALLER_NOT_AUTHORIZED",
+                "AUTHENTICATION_REQUIRED",
+                "POLICY_LOCAL_ONLY",
+                "POLICY_LAN_ONLY"
+              ]
+            },
+            "audit": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "action",
+                "destinationZone",
+                "contentClass",
+                "collectionCount",
+                "collections",
+                "effectivePolicy",
+                "effectivePolicySource",
+                "callerAuthenticated",
+                "callerOperationAuthorized"
+              ],
+              "properties": {
+                "action": {
+                  "enum": [
+                    "retrieve",
+                    "serve",
+                    "publish",
+                    "remote_inference",
+                    "export",
+                    "clip_write",
+                    "unknown"
+                  ]
+                },
+                "destinationZone": {
+                  "enum": [
+                    "local_process",
+                    "loopback",
+                    "lan",
+                    "remote",
+                    "unknown"
+                  ]
+                },
+                "contentClass": {
+                  "enum": [
+                    "source",
+                    "snippet",
+                    "metadata",
+                    "attachment",
+                    "embedding",
+                    "capsule",
+                    "audit_log",
+                    "retrieval_trace",
+                    "unknown"
+                  ]
+                },
+                "collectionCount": { "type": "integer", "minimum": 0 },
+                "collections": {
+                  "type": "array",
+                  "items": { "type": "string" },
+                  "maxItems": 64
+                },
+                "effectivePolicy": {
+                  "enum": ["local_only", "lan", "remote", "unknown"]
+                },
+                "effectivePolicySource": {
+                  "enum": [
+                    "explicit",
+                    "config_default",
+                    "legacy_default",
+                    "mixed",
+                    "unknown"
+                  ]
+                },
+                "callerAuthenticated": {
+                  "anyOf": [{ "type": "boolean" }, { "type": "null" }]
+                },
+                "callerOperationAuthorized": {
+                  "anyOf": [{ "type": "boolean" }, { "type": "null" }]
+                }
+              }
+            }
+          }
         }
       }
     },
-    "id": { "type": "null" }
+    "id": {
+      "anyOf": [{ "type": "null" }, { "type": "integer" }, { "type": "string" }]
+    }
   }
 }

package/spec/output-schemas/publish-artifact.schema.json

@@ -13,6 +13,7 @@
       "required": ["version", "source", "exportedAt", "spaces"],
       "properties": {
         "version": { "const": 1 },
+        "egressLineage": { "$ref": "#/definitions/egressLineage" },
         "source": { "$ref": "#/definitions/slug" },
         "exportedAt": { "type": "string", "format": "date-time" },
         "spaces": {
@@ -33,6 +34,7 @@
       "required": ["version", "source", "exportedAt", "spaces"],
       "properties": {
         "version": { "const": 2 },
+        "egressLineage": { "$ref": "#/definitions/egressLineage" },
         "source": { "$ref": "#/definitions/slug" },
         "exportedAt": { "type": "string", "format": "date-time" },
         "spaces": {
@@ -51,6 +53,35 @@
       "type": "string",
       "pattern": "^[a-f0-9]{64}$"
     },
+    "egressLineage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["effectivePolicy", "digest", "sources"],
+      "properties": {
+        "effectivePolicy": { "enum": ["local_only", "lan", "remote"] },
+        "digest": { "$ref": "#/definitions/hash" },
+        "sources": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["collection", "policy", "source"],
+            "properties": {
+              "collection": {
+                "type": "string",
+                "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$"
+              },
+              "policy": { "enum": ["local_only", "lan", "remote"] },
+              "source": {
+                "enum": ["explicit", "config_default", "legacy_default"]
+              }
+            }
+          }
+        }
+      }
+    },
     "docid": {
       "type": "string",
       "pattern": "^#[a-f0-9]{8}$"
@@ -145,6 +176,7 @@
       "properties": {
         "schemaVersion": { "const": "1.0" },
         "projectionRevision": { "$ref": "#/definitions/hash" },
+        "egressLineage": { "$ref": "#/definitions/egressLineage" },
         "generatedAt": { "type": "string", "format": "date-time" },
         "visibility": { "const": "public" },
         "capabilities": {

package/spec/output-schemas/record-import.schema.json

@@ -26,6 +26,7 @@
       "type": "string",
       "pattern": "^[a-f0-9]{64}$"
     },
+    "egressLineage": { "$ref": "#/$defs/egressLineage" },
     "snapshotState": { "enum": ["complete", "partial"] },
     "authoritative": { "type": "boolean" },
     "stoppedByCap": { "type": "boolean" },
@@ -78,6 +79,35 @@
     }
   },
   "$defs": {
+    "egressLineage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["effectivePolicy", "digest", "sources"],
+      "properties": {
+        "effectivePolicy": { "enum": ["local_only", "lan", "remote"] },
+        "digest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "sources": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["collection", "policy", "source"],
+            "properties": {
+              "collection": {
+                "type": "string",
+                "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$"
+              },
+              "policy": { "enum": ["local_only", "lan", "remote"] },
+              "source": {
+                "enum": ["explicit", "config_default", "legacy_default"]
+              }
+            }
+          }
+        }
+      }
+    },
     "attachment": {
       "type": "object",
       "additionalProperties": false,

package/spec/output-schemas/retrieval-trace-common.schema.json

@@ -27,6 +27,35 @@
         "index": { "$ref": "#/definitions/sha256" }
       }
     },
+    "egressLineage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["effectivePolicy", "digest", "sources"],
+      "properties": {
+        "effectivePolicy": { "enum": ["local_only", "lan", "remote"] },
+        "digest": { "$ref": "#/definitions/sha256" },
+        "sources": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["collection", "policy", "source"],
+            "properties": {
+              "collection": {
+                "type": "string",
+                "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$"
+              },
+              "policy": { "enum": ["local_only", "lan", "remote"] },
+              "source": {
+                "enum": ["explicit", "config_default", "legacy_default"]
+              }
+            }
+          }
+        }
+      }
+    },
     "summary": { "$ref": "gno://schemas/retrieval-trace-summary@1.0" },
     "trace": {
       "type": "object",
@@ -79,6 +108,7 @@
             }
           ]
         },
+        "egressLineage": { "$ref": "#/definitions/egressLineage" },
         "fingerprints": { "$ref": "#/definitions/fingerprints" },
         "createdAtMs": { "type": "integer", "minimum": 0 },
         "updatedAtMs": { "type": "integer", "minimum": 0 },
@@ -465,6 +495,7 @@
         },
         "format": { "enum": ["agentic-receipt", "qrels"] },
         "artifactHash": { "$ref": "#/definitions/sha256" },
+        "egressLineage": { "$ref": "#/definitions/egressLineage" },
         "createdAtMs": { "type": "integer", "minimum": 0 }
       }
     },

package/spec/output-schemas/retrieval-trace-export.schema.json

@@ -20,6 +20,9 @@
           "properties": {
             "schemaVersion": { "const": "1.0" },
             "format": { "const": "agentic-receipt" },
+            "egressLineage": {
+              "$ref": "gno://schemas/retrieval-trace-common@1.0#/definitions/egressLineage"
+            },
             "traces": {
               "type": "array",
               "minItems": 1,

package/spec/output-schemas/retrieval-trace-qrels.schema.json

@@ -8,6 +8,9 @@
   "properties": {
     "schemaVersion": { "const": "1.0" },
     "format": { "const": "qrels" },
+    "egressLineage": {
+      "$ref": "gno://schemas/retrieval-trace-common@1.0#/definitions/egressLineage"
+    },
     "cases": {
       "type": "array",
       "minItems": 1,

package/spec/output-schemas/retrieval-trace-summary.schema.json

@@ -26,6 +26,9 @@
         "config": { "$ref": "#/definitions/sha256" },
         "index": { "$ref": "#/definitions/sha256" }
       }
+    },
+    "egressLineage": {
+      "$ref": "gno://schemas/retrieval-trace-common@1.0#/definitions/egressLineage"
     }
   },
   "type": "object",
@@ -55,6 +58,7 @@
     },
     "queryShape": { "$ref": "#/definitions/textShape" },
     "goalShape": { "$ref": "#/definitions/textShape" },
+    "egressLineage": { "$ref": "#/definitions/egressLineage" },
     "fingerprints": { "$ref": "#/definitions/fingerprints" },
     "createdAtMs": { "type": "integer", "minimum": 0 },
     "updatedAtMs": { "type": "integer", "minimum": 0 },

package/spec/output-schemas/search-results.schema.json

@@ -6,6 +6,35 @@
   "type": "object",
   "required": ["results", "meta"],
   "$defs": {
+    "egressLineage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["effectivePolicy", "digest", "sources"],
+      "properties": {
+        "effectivePolicy": { "enum": ["local_only", "lan", "remote"] },
+        "digest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "sources": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 128,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["collection", "policy", "source"],
+            "properties": {
+              "collection": {
+                "type": "string",
+                "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$"
+              },
+              "policy": { "enum": ["local_only", "lan", "remote"] },
+              "source": {
+                "enum": ["explicit", "config_default", "legacy_default"]
+              }
+            }
+          }
+        }
+      }
+    },
     "searchResult": {
       "type": "object",
       "required": ["docid", "score", "uri", "snippet", "source"],
@@ -54,6 +83,7 @@
           "type": "string",
           "description": "Resolved user-configured retrieval guidance, ordered from global to collection to matching path prefixes"
         },
+        "egressLineage": { "$ref": "#/$defs/egressLineage" },
         "snippet": {
           "type": "string",
           "description": "Matching text snippet from document mirror"

package/src/app/context-runtime-contract.ts

@@ -3,7 +3,7 @@
 import type { ContextCanonicalProjection } from "../core/context-budget";
 import type { ContextCapsuleV1 } from "../core/context-capsule";
 import type { ContextCapabilityState } from "../core/context-capsule-retrieval-schema";
-import type { ContextCapsulePayloadV1 } from "../core/context-capsule-schema";
+import type { ContextCapsulePayloadV1_1 } from "../core/context-capsule-schema";
 import type { ContextCanonicalPlanDraft } from "../core/context-compiler";
 import type { ContextEvidenceValue } from "../core/context-evidence";
 import type { NormalizedContextBuildInput } from "./context-runtime-input";
@@ -19,6 +19,7 @@ import {
   toContextCapsuleEvidence,
 } from "../core/context-evidence";
 import { canonicalVerifierJson } from "../core/context-verifier-canonical";
+import { mergeEgressLineages } from "../core/egress-provenance";
 import { resolveModelUri } from "../llm/registry";
 
 const fingerprint = (value: unknown): string =>
@@ -104,13 +105,13 @@ const capsuleCapabilities = (
   graphExpansion: states.graphExpansion.outcome === "used",
   exactTokenCount: exactTokens,
   configuredContext,
-  egressPolicy: false,
+  egressPolicy: true,
 });
 
 const capsuleFallbacks = (
   capabilities: ReturnType<typeof capsuleCapabilities>,
   states: ReturnType<typeof capsuleCapabilityStates>
-): ContextCapsulePayloadV1["fallbacks"] => [
+): ContextCapsulePayloadV1_1["fallbacks"] => [
   ...(states.semanticSearch.outcome === "unavailable"
     ? [
         {
@@ -143,12 +144,15 @@ const capsuleFallbacks = (
           capability: "token_count" as const,
         },
       ]),
-  { code: "egress_policy_unavailable", capability: "egress_policy" },
 ];
 
 export const projectContextCapsule = (
   draft: ContextCanonicalPlanDraft<ContextEvidenceValue>,
-  snapshots: { indexFingerprint: string; contextFingerprint: string },
+  snapshots: {
+    indexFingerprint: string;
+    contextFingerprint: string;
+    egressLineage: ContextCapsulePayloadV1_1["egressLineage"];
+  },
   input: NormalizedContextBuildInput,
   deps: ContextCapsuleRuntimeDeps
 ): ContextCanonicalProjection<ContextCapsuleV1> | null => {
@@ -156,6 +160,10 @@ export const projectContextCapsule = (
   const evidence = draft.selection.selected.map((candidate, index) =>
     toContextCapsuleEvidence(candidate, index + 1)
   );
+  const egressLineage = mergeEgressLineages([
+    snapshots.egressLineage,
+    ...evidence.map((item) => item.egressLineage),
+  ]);
   const evidenceIdsByFacet = new Map<string, string[]>();
   for (const item of evidence) {
     for (const facet of item.facets) {
@@ -173,7 +181,7 @@ export const projectContextCapsule = (
     draft.configuredContexts.length > 0
   );
   const base = {
-    schemaVersion: "1.0" as const,
+    schemaVersion: "1.1" as const,
     coordinateSpace: "canonical_mirror" as const,
     goal: draft.goal,
     query: draft.query,
@@ -213,7 +221,7 @@ export const projectContextCapsule = (
     },
     capabilities,
   };
-  const payload: ContextCapsulePayloadV1 = {
+  const payload: ContextCapsulePayloadV1_1 = {
     ...base,
     budget: {
       authority: "canonical_json",
@@ -246,6 +254,7 @@ export const projectContextCapsule = (
       instructionBoundary: "hard_delimited",
       configuredContexts: draft.configuredContexts,
     },
+    egressLineage,
     evidence,
     coverage: {
       complete: draft.selection.coverage.unresolvedFacets.length === 0,

package/src/cli/commands/ask.ts

@@ -165,6 +165,9 @@ export async function ask(
     }
     traceSession = traceStart.value ?? undefined;
     const llm = new LlmAdapter(config);
+    const egressCollections = options.collection
+      ? [options.collection]
+      : ("all" as const);
 
     // Resolve download policy from env/flags
     const policy = resolveDownloadPolicy(process.env, {
@@ -179,6 +182,7 @@ export async function ask(
 
     // Create embedding port
     const embedResult = await llm.createEmbeddingPort(embedUri, {
+      egressCollections,
       policy,
       onProgress: downloadProgress
         ? (progress) => downloadProgress("embed", progress)
@@ -191,6 +195,7 @@ export async function ask(
     // Create expansion port when expansion is enabled.
     if (expandUri) {
       const genResult = await llm.createExpansionPort(expandUri, {
+        egressCollections,
         policy,
         onProgress: downloadProgress
           ? (progress) => downloadProgress("expand", progress)
@@ -204,6 +209,7 @@ export async function ask(
     // Create answer generation port when answers are requested.
     if (answerUri) {
       const genResult = await llm.createGenerationPort(answerUri, {
+        egressCollections,
         policy,
         onProgress: downloadProgress
           ? (progress) => downloadProgress("gen", progress)
@@ -217,6 +223,7 @@ export async function ask(
     // Create rerank port (unless --fast or --no-rerank)
     if (rerankUri) {
       const rerankResult = await llm.createRerankPort(rerankUri, {
+        egressCollections,
         policy,
         onProgress: downloadProgress
           ? (progress) => downloadProgress("rerank", progress)

package/src/cli/commands/collection/index.ts

@@ -7,5 +7,10 @@
 export { collectionAdd } from "./add";
 export { collectionClearEmbeddings } from "./clear-embeddings";
 export { collectionList } from "./list";
+export {
+  collectionPolicyCheck,
+  collectionPolicyGet,
+  collectionPolicySet,
+} from "./policy";
 export { collectionRemove } from "./remove";
 export { collectionRename } from "./rename";